Lucene search
+L

666 matches found

OSV
OSV
•added 2021/02/25 9:15 a.m.•9 views

DEBIAN-CVE-2020-36254

scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685...

8.1CVSS8.4AI score0.01867EPSS
SaveExploits0References1
Prion
Prion
•added 2021/02/25 9:15 a.m.•52 views

Sql injection

scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685...

6.8CVSS6AI score0.03681EPSS
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
•added 2021/02/25 9:15 a.m.•55 views

CVE-2020-36254

scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685...

8.1CVSS7.2AI score0.01867EPSS
SaveExploits0References2
OSV
OSV
•added 2021/02/25 9:15 a.m.•17 views

UBUNTU-CVE-2020-36254

scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685...

8.1CVSS7.3AI score0.01867EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2021/02/25 8:29 a.m.•52 views

CVE-2020-36254

scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685...

6.4AI score0.01867EPSS
SaveExploits0References1
CVE
CVE
•added 2021/02/25 8:29 a.m.•411 views

CVE-2020-36254

CVE-2020-36254 : In Dropbear, the SCP client (scp.c) before version 2020.79 mishandles the filename of “.” or an empty filename, related to CVE-2018-20685. Affected: Dropbear releases prior to 2020.79. Impact and exploit details are not provided beyond the filename handling issue in scp. Remediat...

8.1CVSS6.3AI score0.01867EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2021/02/25 8:29 a.m.•5 views

CVE-2020-36254

scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685...

8.6AI score0.01867EPSS
SaveExploits0References1
Mend
Mend
•added 2021/02/25 8:29 a.m.•0 views

CVE-2020-36254

scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685...

9.2CVSS0.01867EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2021/02/25 8:29 a.m.•85 views

CVE-2020-36254

scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685...

8.1CVSS6.8AI score0.01867EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2021/02/25 8:29 a.m.•118 views

CVE-2020-36254

scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685...

8.1CVSS6.6AI score0.01867EPSS
SaveExploits0
CNNVD
CNNVD
•added 2021/02/25 12:00 a.m.•21 views

Perth Dropbear Security Vulnerability

Perth Dropbear is a lightweight SSH server/client software from the University of Perth, Australia that is primarily used in embedded devices. A security vulnerability exists in Dropbear before 2020.79 that stems from incorrectly processed filenames, or empty filenames...

8.1CVSS7.3AI score0.01867EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/25 12:00 a.m.•4 views

CVE-2020-36254: Undefined Security Weakness

scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685...

8.1CVSS5.8AI score0.01867EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/02/25 12:00 a.m.•22 views

PT-2021-11987 · Dropbear +1 · Dropbear +1

Name of the Vulnerable Software and Affected Versions: Dropbear versions prior to 2020.79 Description: The issue is related to the handling of filenames in scp.c, specifically with . or an empty filename. This is a related issue to a previously known problem. Recommendations: For versions prior t...

10CVSS6.6AI score0.93547EPSS
SaveExploits4References25
OSV
OSV
•added 2021/02/01 2:15 a.m.•17 views

CVE-2020-15833

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The Dropbear SSH daemon has been modified to accept an alternate hard-coded path to a public key that allows root access. This key is stored in a /rom location that cannot be modified by the device owner...

9.8CVSS7.2AI score0.01648EPSS
SaveExploits0References2
NVD
NVD
•added 2021/02/01 2:15 a.m.•23 views

CVE-2020-15833

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The Dropbear SSH daemon has been modified to accept an alternate hard-coded path to a public key that allows root access. This key is stored in a /rom location that cannot be modified by the device owner...

10CVSS9.3AI score0.01648EPSS
SaveExploits0References2
Prion
Prion
•added 2021/02/01 2:15 a.m.•25 views

Hardcoded credentials

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The Dropbear SSH daemon has been modified to accept an alternate hard-coded path to a public key that allows root access. This key is stored in a /rom location that cannot be modified by the device owner...

10CVSS9.2AI score0.01648EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/02/01 1:39 a.m.•33 views

CVE-2020-15833

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The Dropbear SSH daemon has been modified to accept an alternate hard-coded path to a public key that allows root access. This key is stored in a /rom location that cannot be modified by the device owner...

9.4AI score0.01648EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/01 12:00 a.m.•3 views

CVE-2020-15833: Use of Hard-coded Credentials

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The Dropbear SSH daemon has been modified to accept an alternate hard-coded path to a public key that allows root access. This key is stored in a /rom location that cannot be modified by the device owner...

10CVSS5.7AI score0.01648EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/02/01 12:00 a.m.•14 views

PT-2021-9837 · Mofi Network +1 · Mofi4500-4Gxelte +1

Name of the Vulnerable Software and Affected Versions: Mofi Network MOFI4500-4GXeLTE version 4.1.5-std Description: An issue was discovered where the Dropbear SSH daemon has been modified to accept an alternate hard-coded path to a public key that allows root access. This key is stored in a /rom...

10CVSS6.6AI score0.93547EPSS
SaveExploits4References20
CNNVD
CNNVD
•added 2021/01/31 12:00 a.m.•16 views

Mofi Network MOFI4500-4GXeLTE 信任管理问题漏洞

The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. A security vulnerability exists in the Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The vulnerability stems from the fact that the Dropbear SSH daemon has been modified to accept an alternate hardcoded path to a public...

10CVSS7.1AI score0.01648EPSS
SaveExploits0References3
Rows per page
Query Builder